Content
77%Weight 40%Scale 1-5Reviews the quality of instructions and guidance provided to agents. Good implementation is clear, handles edge cases, and produces reliable results.
A strong, highly actionable skill body with an explicitly sequenced workflow, validation checkpoints, and error-recovery guidance, all grounded in production-derived specifics. Its weaknesses are redundancy (three rules each stated 2-3 times across sections) and a set of use-case references that don't resolve to real bundle files.
Suggestions
Consolidate the repeated rules: state the `--description` 50-character cap, the 'never Read/sed large specs' rule, and the 'x-cs-operation-config only when asked' rule once each, and have Common Pitfalls cross-reference the canonical section instead of restating them.
Fix or remove the dangling `use-cases/http-actions.md`, `use-cases/greynoise-deep-dive.md`, and `use-cases/custom-soar-actions.md` references — no `use-cases/` directory exists in the bundle, so following them fails.
Move the vendor-auth prose that repeats the auth table (e.g., the apiKey-prefix paragraph) and the full foundry-js example into `references/auth-examples.md` and `references/calling-patterns.md`, keeping only a minimal inline example in SKILL.md.
| Dimension | Reasoning | Score |
|---|---|---|
Conciseness | The body is dense with Foundry-specific knowledge Claude doesn't have (good), but several rules are repeated verbatim in multiple sections: the 50-character `--description` cap appears three times (top blockquote, step 3 callout, Common Pitfalls), the 'never Read/sed large spec files' rule appears in both Efficiency Rules and Common Pitfalls, and the 'only add x-cs-operation-config when asked' rule appears in step 3, the Expose section, and Pitfalls. This is noticeable duplication that could be consolidated. Not 2 because there is no explanation of concepts Claude already knows (OpenAPI, OAuth basics, etc.) and most sections earn their tokens; not 4 because the redundancy across three sections is more than minor trimming. | 3 / 5 |
Actionability | Fully executable throughout: exact CLI commands (`foundry api-integrations create --name … --description … --spec … --no-prompt`), a venv setup block for the PEP 668 problem, a copy-paste python3 snippet for patching a single operation, complete YAML/JSON spec fragments, a runnable foundry-js calling example, and exact error strings ('input must be at most 50 characters long', '400 request failed schema validation: …') that enable precise failure matching. Common cases are covered end-to-end. | 5 / 5 |
Workflow Clarity | The 'Download, Adapt, Register' workflow is explicitly ordered with numbered steps, includes an explicit validation checkpoint after registration ("Validate immediately after registering (`foundry apps validate --no-prompt`)"), an explicit error-recovery path when the adapt script gets a field wrong ("patch only that field and tell the user what the script missed"), guidance for the hook-blocked Swagger 2.0 case, and the deploy→lookup-ID→re-deploy loop for agent tools. The operation is not destructive, so no batch-validation cap applies. | 5 / 5 |
Progressive Disclosure | Structure is real: a Reading Guide table maps tasks to the three reference files (all of which exist in the bundle), references are one level deep and well signaled, and the adapt script is properly bundled. However, the body cites `use-cases/http-actions.md`, `use-cases/greynoise-deep-dive.md`, and `use-cases/custom-soar-actions.md`, and no `use-cases/` directory exists in the bundle — three dangling references. Additionally, a fair amount of detail (the auth pattern table with prose, the full foundry-js example, server-URL variants) duplicates material that the reference files exist to hold. Not 4 because broken references exceed 'minor organization gaps'; not 2 because the core structure and navigation are genuinely good. | 3 / 5 |
Total | 16 / 20 Passed |